Commit d135ddc
committed
⭐ GCP: Add Cloud Armor, SSL, Cloud NAT, CAS, Audit Config, and Org Policy resources
Add security-focused resources to the GCP provider covering WAF/DDoS protection,
TLS configuration, NAT auditing, private PKI, audit logging, and org policy enforcement.
New resources:
Cloud Armor:
- gcp.project.computeService.securityPolicy: id, name, description, type, labels,
adaptiveProtectionConfig, advancedOptionsConfig, ddosProtectionConfig,
recaptchaOptionsConfig, regionUrl, selfLink, createdAt, rules()
- gcp.project.computeService.securityPolicy.rule: id, action, description, priority,
preview, match, networkMatch, rateLimitOptions, redirectOptions, headerAction,
preconfiguredWafConfig
SSL Policies:
- gcp.project.computeService.sslPolicy: id, name, description, profile, minTlsVersion,
customFeatures, enabledFeatures, regionUrl, selfLink, warnings, createdAt
SSL Certificates:
- gcp.project.computeService.sslCertificate: id, name, description, type,
subjectAlternativeNames, managed, regionUrl, selfLink, expireTime, createdAt
Cloud NAT:
- gcp.project.computeService.router.nat: id, name, natIpAllocateOption,
sourceSubnetworkIpRangesToNat, enableDynamicPortAllocation,
enableEndpointIndependentMapping, minPortsPerVm, maxPortsPerVm, natIps,
subnetworks, rules, logConfig, endpointTypes, autoNetworkTier,
icmpIdleTimeoutSec, tcpEstablishedIdleTimeoutSec, tcpTransitoryIdleTimeoutSec,
tcpTimeWaitTimeoutSec, udpIdleTimeoutSec
- router.natServices field added (router.nats []dict preserved as deprecated)
Certificate Authority Service:
- gcp.project.certificateAuthorityService: projectId, caPools()
- gcp.project.certificateAuthorityService.caPool: projectId, resourcePath, name,
location, tier, issuancePolicy, publishingOptions, labels,
certificateAuthorities(), certificates()
- gcp.project.certificateAuthorityService.certificateAuthority: projectId,
resourcePath, name, location, caPool, type, state, keySpec, config, lifetime,
pemCaCertificates, subordinateConfig, labels, gcsBucket, accessUrls,
createdAt, updatedAt, deletedAt, expireTime
- gcp.project.certificateAuthorityService.certificate: projectId, resourcePath,
name, location, caPool, issuerCertificateAuthority, lifetime,
subjectDescription, certDescription, pemCertificate, pemCertificateChain,
revocationDetails, labels, createdAt, updatedAt
Audit Logging Configuration:
- gcp.resourcemanager.auditConfig: id, service, auditLogConfigs
- gcp.resourcemanager.auditConfig.logConfig: id, logType, exemptedMembers
- Exposed on both gcp.organization and gcp.project
Organization Policies:
- gcp.orgPolicy: id, name, constraintName, spec, dryRunSpec, etag, updatedAt
- Exposed on both gcp.organization and gcp.project
Signed-off-by: Tim Smith <tsmith84@gmail.com>1 parent 2a19947 commit d135ddc
File tree
11 files changed
+12003
-8268
lines changed- providers/gcp
- resources
11 files changed
+12003
-8268
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
18 | 18 | | |
19 | 19 | | |
20 | 20 | | |
| 21 | + | |
21 | 22 | | |
22 | 23 | | |
23 | 24 | | |
24 | 25 | | |
| 26 | + | |
25 | 27 | | |
26 | 28 | | |
27 | 29 | | |
| |||
285 | 287 | | |
286 | 288 | | |
287 | 289 | | |
288 | | - | |
| 290 | + | |
289 | 291 | | |
290 | 292 | | |
291 | 293 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
76 | 76 | | |
77 | 77 | | |
78 | 78 | | |
| 79 | + | |
| 80 | + | |
79 | 81 | | |
80 | 82 | | |
81 | 83 | | |
| |||
92 | 94 | | |
93 | 95 | | |
94 | 96 | | |
| 97 | + | |
| 98 | + | |
95 | 99 | | |
96 | 100 | | |
97 | 101 | | |
| |||
569 | 573 | | |
570 | 574 | | |
571 | 575 | | |
572 | | - | |
573 | | - | |
574 | 576 | | |
575 | 577 | | |
576 | 578 | | |
| |||
0 commit comments